A social engineering attack on Namecheap, Across's domain registrar, at roughly 18:45 UTC gave an attacker control of the across.(to) domain. The team says it was alerted within 15 minutes and shut the site down; SEAL911 flagged the domain as a phishing site with major wallets, and Cloudflare marked it at risk and later pulled its DNS records. Some visitors during the brief exposure may have been affected, though no third-party integrations or API users were. Namecheap has been unresponsive, so the frontend and API remain offline; a post-mortem is planned and affected users will be made whole.

AI summary of the linked source — not editorial content.

Explore the topic

Loading related coverage…

Comments

Loading comments…